Creative Artists Agency
Sr. Manager, Technology Governance & Risk Management
Creative Artists Agency, New York, New York, us, 10261
Sr. Manager, Technology Governance & Risk Management
Join to apply for the
Sr. Manager, Technology Governance & Risk Management
role at
Creative Artists Agency
The Role As Senior Manager Technology Governance and Risk Management at CAA, you will be tasked with setting the strategic governance and risk management framework to ensure our organization's technology operations adhere to defined internal policies, standards, industry best practices and regulatory/legal requirements while proactively identifying and managing technology-related risks. You will own, drive and assist in the evolution of the organization’s Technology Governance and Risk Management framework/strategy inclusive of methodology, tools for risk assessment, issue management, monitoring and reporting. This role is ultimately responsible for ensuring CAA Technology and Data adheres to the IT General Controls and Sarbanes-Oxley requirements.
The incumbent will provide leadership, execution and management necessary to identify, evaluate, mitigate and manage risk and review. You will challenge and enhance the existing risk management strategy, evolve the existing framework, tools and procedures to achieve effective risk identification and management within best practice IT control frameworks. This role will actively engage with and develop effective, collaborative working relationships across all CAA Tech and Data teams to support cooperative responses to risk management matters, including maintaining effective communication, providing guidance and training to promote risk control awareness, ownership and accountability are critical.
Responsibilities
Assess/evolve Technology Governance Framework and ensure alignment to regulatory (e.g. SOX) and industry best practices (e.g. COBIT, ITIL) to standardize processes, decision-making, and accountability.
Develop, implement, maintain and provide direction in the development, implementation, and communication of risk-related policies and standards (GDPR, CDPA, etc.).
Provide insight and guidance to Tech policies, standards and processes to ensure risk controls are aligned to framework best practices.
Monitor and assess IT compliance with relevant regulations and defined policies.
Conduct risk assessments and develop mitigation strategies for IT-related risks.
Coordinate across technology domain leads to manage CAA’s controls testing program and ensure alignment with business goals pertaining to compliance, risk, and governance requirements/processes.
Manage IT audits and ensure timely remediation of audit findings.
Implement and manage relevant tools/systems for global Technology organization to support compliance and risk management for IT in the organization.
Provide training and awareness programs on IT governance and compliance topics.
Stay updated on emerging IT governance trends and best practices.
Report on IT governance performance, Key Risk Indicators (KRIs), key compliance KPIs and program maturity to senior management.
Collaborate with legal and compliance teams to ensure adherence to relevant laws, regulations, and industry standards.
Qualifications
Experience / Knowledge of Technology Governance industry standards (NIST, ITIL, COBIT, SOX).
Proven experience in Technology governance, risk management, or compliance roles, preferably in a corporate setting.
Strong knowledge of regulatory frameworks, industry standards, and best practices related to Technology Governance.
Experience in Risk and Governance Platforms (OneTrust, Workiva, etc.).
Requirements
Bachelor’s degree in Information Technology or Computer Science, or in any related field.
8+ years of relevant experience, specifically in performance/risk measurement; direct experience in Technology Risk Management preferred.
Excellent problem solving and self-management skills to tactically and analytically solve technical problems and manage metrics design, collection, analysis, and reporting.
Informed in information security, business continuity, data management, security and encryption, and vulnerability analysis and audit.
Experience working in orchestration platforms (ServiceNow, Jira).
Ability to manage multiple projects; self-sufficient, responsible and dependable; methodical and organized.
Excellent analytical skills.
Location This is a hybrid role that may be based in our New York or Nashville office.
Compensation The annual base salary for this position is in the range of $180,000 - $200,000. This position also is eligible for benefits and a discretionary bonus. Salary may vary based on experience, time in role, business sector, and location. Speak with a CAA Recruiter to learn more.
Creative Artists Agency, LLC (the “Company”) is committed to a policy of Equal Employment Opportunity and will not discriminate on the basis of race, color, religion, creed, gender or sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, family status, sexual orientation, gender identity, or any other characteristic protected by applicable law. The Company also provides reasonable accommodation for qualified individuals with disabilities.
CAA does not accept unsolicited resumes from third-party recruiters unless contractually engaged by CAA. Any such employment agency or entity that submits an unsolicited resume does so with the understanding that CAA reserves the right to hire that applicant at its discretion without any fee owed to the submitting agency.
#J-18808-Ljbffr
Sr. Manager, Technology Governance & Risk Management
role at
Creative Artists Agency
The Role As Senior Manager Technology Governance and Risk Management at CAA, you will be tasked with setting the strategic governance and risk management framework to ensure our organization's technology operations adhere to defined internal policies, standards, industry best practices and regulatory/legal requirements while proactively identifying and managing technology-related risks. You will own, drive and assist in the evolution of the organization’s Technology Governance and Risk Management framework/strategy inclusive of methodology, tools for risk assessment, issue management, monitoring and reporting. This role is ultimately responsible for ensuring CAA Technology and Data adheres to the IT General Controls and Sarbanes-Oxley requirements.
The incumbent will provide leadership, execution and management necessary to identify, evaluate, mitigate and manage risk and review. You will challenge and enhance the existing risk management strategy, evolve the existing framework, tools and procedures to achieve effective risk identification and management within best practice IT control frameworks. This role will actively engage with and develop effective, collaborative working relationships across all CAA Tech and Data teams to support cooperative responses to risk management matters, including maintaining effective communication, providing guidance and training to promote risk control awareness, ownership and accountability are critical.
Responsibilities
Assess/evolve Technology Governance Framework and ensure alignment to regulatory (e.g. SOX) and industry best practices (e.g. COBIT, ITIL) to standardize processes, decision-making, and accountability.
Develop, implement, maintain and provide direction in the development, implementation, and communication of risk-related policies and standards (GDPR, CDPA, etc.).
Provide insight and guidance to Tech policies, standards and processes to ensure risk controls are aligned to framework best practices.
Monitor and assess IT compliance with relevant regulations and defined policies.
Conduct risk assessments and develop mitigation strategies for IT-related risks.
Coordinate across technology domain leads to manage CAA’s controls testing program and ensure alignment with business goals pertaining to compliance, risk, and governance requirements/processes.
Manage IT audits and ensure timely remediation of audit findings.
Implement and manage relevant tools/systems for global Technology organization to support compliance and risk management for IT in the organization.
Provide training and awareness programs on IT governance and compliance topics.
Stay updated on emerging IT governance trends and best practices.
Report on IT governance performance, Key Risk Indicators (KRIs), key compliance KPIs and program maturity to senior management.
Collaborate with legal and compliance teams to ensure adherence to relevant laws, regulations, and industry standards.
Qualifications
Experience / Knowledge of Technology Governance industry standards (NIST, ITIL, COBIT, SOX).
Proven experience in Technology governance, risk management, or compliance roles, preferably in a corporate setting.
Strong knowledge of regulatory frameworks, industry standards, and best practices related to Technology Governance.
Experience in Risk and Governance Platforms (OneTrust, Workiva, etc.).
Requirements
Bachelor’s degree in Information Technology or Computer Science, or in any related field.
8+ years of relevant experience, specifically in performance/risk measurement; direct experience in Technology Risk Management preferred.
Excellent problem solving and self-management skills to tactically and analytically solve technical problems and manage metrics design, collection, analysis, and reporting.
Informed in information security, business continuity, data management, security and encryption, and vulnerability analysis and audit.
Experience working in orchestration platforms (ServiceNow, Jira).
Ability to manage multiple projects; self-sufficient, responsible and dependable; methodical and organized.
Excellent analytical skills.
Location This is a hybrid role that may be based in our New York or Nashville office.
Compensation The annual base salary for this position is in the range of $180,000 - $200,000. This position also is eligible for benefits and a discretionary bonus. Salary may vary based on experience, time in role, business sector, and location. Speak with a CAA Recruiter to learn more.
Creative Artists Agency, LLC (the “Company”) is committed to a policy of Equal Employment Opportunity and will not discriminate on the basis of race, color, religion, creed, gender or sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, family status, sexual orientation, gender identity, or any other characteristic protected by applicable law. The Company also provides reasonable accommodation for qualified individuals with disabilities.
CAA does not accept unsolicited resumes from third-party recruiters unless contractually engaged by CAA. Any such employment agency or entity that submits an unsolicited resume does so with the understanding that CAA reserves the right to hire that applicant at its discretion without any fee owed to the submitting agency.
#J-18808-Ljbffr